CVE-2025-57198: Command Injection

Published Dec 3, 2025

Updated

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input.

Affected Software

3 affected components

AVTECH SECURITY DGM1104

All of the following

AVTECH Dgm1104 Firmware

AVTECH DGM1104

Event History

Dec 3, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-57198?

CVE-2025-57198 is classified as a high-severity vulnerability due to its potential for remote command execution.

How do I fix CVE-2025-57198?

To mitigate CVE-2025-57198, update the AVTECH SECURITY DGM1104 firmware to the latest version released by the vendor.

What type of vulnerability is CVE-2025-57198?

CVE-2025-57198 is an authenticated command injection vulnerability found in the Machine.cgi endpoint.

Who is affected by CVE-2025-57198?

Users of the AVTECH SECURITY DGM1104 device are affected by CVE-2025-57198.

Can CVE-2025-57198 be exploited remotely?

Yes, CVE-2025-57198 can be exploited by attackers who have authenticated access to the vulnerable device.